Skip to content

[Snyk] Upgrade looks-same from 7.3.0 to 10.0.1#6

Open
Dustin4444 wants to merge 1 commit intomasterfrom
snyk-upgrade-f3cf3b6100e80ce4b6295d31891c511f
Open

[Snyk] Upgrade looks-same from 7.3.0 to 10.0.1#6
Dustin4444 wants to merge 1 commit intomasterfrom
snyk-upgrade-f3cf3b6100e80ce4b6295d31891c511f

Conversation

@Dustin4444
Copy link
Owner

@Dustin4444 Dustin4444 commented Oct 15, 2025

snyk-top-banner

Snyk has created this PR to upgrade looks-same from 7.3.0 to 10.0.1.

ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.

  • The recommended version is 14 versions ahead of your current version.

  • The recommended version was released 2 months ago.

⚠️ Warning: This PR contains major version upgrade(s), and may be a breaking change.

Issues fixed by the recommended upgrade:

Issue Score Exploit Maturity
high severity Regular Expression Denial of Service (ReDoS)
SNYK-JS-ANSIREGEX-1583908		 482 Proof of Concept
high severity Prototype Pollution
SNYK-JS-JSONSCHEMA-1920922		 482 No Known Exploit
high severity Code Injection
SNYK-JS-LODASH-1040724		 482 Proof of Concept
high severity Regular Expression Denial of Service (ReDoS)
SNYK-JS-AXIOS-1579269		 482 Proof of Concept
high severity Regular Expression Denial of Service (ReDoS)
SNYK-JS-NORMALIZEURL-1296539		 482 No Known Exploit
high severity Excessive Platform Resource Consumption within a Loop
SNYK-JS-BRACES-6838727		 482 Proof of Concept
high severity Prototype Poisoning
SNYK-JS-QS-3153490		 482 Proof of Concept
high severity Regular Expression Denial of Service (ReDoS)
SNYK-JS-SEMVER-3247795		 482 Proof of Concept
high severity Regular Expression Denial of Service (ReDoS)
SNYK-JS-SEMVER-3247795		 482 Proof of Concept
high severity Regular Expression Denial of Service (ReDoS)
SNYK-JS-SEMVER-3247795		 482 Proof of Concept
high severity Information Exposure
SNYK-JS-SIMPLEGET-2361683		 482 Proof of Concept
high severity Improper Verification of Cryptographic Signature
SNYK-JS-ELLIPTIC-8172694		 482 No Known Exploit
high severity Regular Expression Denial of Service (ReDoS)
SNYK-JS-ETHERS-1586048		 482 Proof of Concept
high severity Improper Handling of Extra Parameters
SNYK-JS-FOLLOWREDIRECTS-6141137		 482 Proof of Concept
high severity Prototype Pollution
SNYK-JS-INI-1048974		 482 Proof of Concept
medium severity Regular Expression Denial of Service (ReDoS)
SNYK-JS-LODASH-1018905		 482 Proof of Concept
medium severity Inefficient Regular Expression Complexity
SNYK-JS-MICROMATCH-6838728		 482 No Known Exploit
medium severity Regular Expression Denial of Service (ReDoS)
SNYK-JS-BABELRUNTIMECOREJS3-9397696		 482 Proof of Concept
medium severity Regular Expression Denial of Service (ReDoS)
SNYK-JS-MINIMATCH-3050818		 482 No Known Exploit
medium severity Denial of Service (DoS)
SNYK-JS-NWSAPI-2841516		 482 No Known Exploit
medium severity Regular Expression Denial of Service (ReDoS)
SNYK-JS-PATHPARSE-1077067		 482 Proof of Concept
medium severity Regular Expression Denial of Service (ReDoS)
SNYK-JS-PROMPTS-1729737		 482 Proof of Concept
medium severity Regular Expression Denial of Service (ReDoS)
SNYK-JS-TRIMOFFNEWLINES-1296850		 482 Proof of Concept
medium severity Regular Expression Denial of Service (ReDoS)
SNYK-JS-WS-1296835		 482 Proof of Concept
medium severity Information Exposure
SNYK-JS-FOLLOWREDIRECTS-2332181		 482 Proof of Concept
medium severity Information Exposure
SNYK-JS-FOLLOWREDIRECTS-6444610		 482 Proof of Concept
medium severity Regular Expression Denial of Service (ReDoS)
SNYK-JS-GLOBPARENT-1016905		 482 Proof of Concept
medium severity Regular Expression Denial of Service (ReDoS)
SNYK-JS-HOSTEDGITINFO-1088355		 482 Proof of Concept
medium severity Regular Expression Denial of Service (ReDoS)
SNYK-JS-HTTPCACHESEMANTICS-3248783		 482 Proof of Concept
low severity Regular Expression Denial of Service (ReDoS)
SNYK-JS-BRACEEXPANSION-9789073		 482 Proof of Concept
low severity Prototype Pollution
SNYK-JS-MINIMIST-2429795		 482 Proof of Concept
critical severity Improper Verification of Cryptographic Signature
SNYK-JS-ELLIPTIC-7577916		 482 Proof of Concept
critical severity Improper Verification of Cryptographic Signature
SNYK-JS-ELLIPTIC-7577917		 482 Proof of Concept
critical severity Improper Verification of Cryptographic Signature
SNYK-JS-ELLIPTIC-7577918		 482 Proof of Concept
medium severity Uncontrolled Resource Consumption ('Resource Exhaustion')
SNYK-JS-TAR-6476909		 482 Proof of Concept
low severity Regular Expression Denial of Service (ReDoS)
SNYK-JS-WORDWRAP-3149973		 482 Proof of Concept
critical severity Information Exposure
SNYK-JS-ELLIPTIC-8720086		 482 Proof of Concept
low severity Information Exposure
SNYK-JS-FOLLOWREDIRECTS-2396346		 482 No Known Exploit
Release notes
Package name: looks-same
  • 10.0.1 - 2025-08-18

    10.0.1

  • 10.0.0 - 2025-08-18

    What's new

    • In this release, we got rid of sharp. Now "looks-same" package has no compiled dependencies, so there should be no errors trying to install looks-same version on old/new version of node.js.
    • Increased performance when comparing images with lots of different pixels (up to 3x)
    • Improved result difference images compression
    • Reduced total "node_modules" size (41M -> 660K)

    💣 Breaking changes

    • formats, other than png, are not supported

    Dependencies size change:

    Before:

    ❯ pnpm add looks-same@9
    Packages: +65
    +++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
    Progress: resolved 65, reused 50, downloaded 15, added 65, done
    node_modules/.pnpm/sharp@0.32.6/node_modules/sharp: Running install script, done in 2.7s

    dependencies:

    • looks-same 9.0.1

    Done in 5s

    ❯ du -cksh *(D) | sort -hr
 41M	total
 41M	node_modules
 16K	pnpm-lock.yaml
4.0K	package.json

    After:

    ❯ pnpm add looks-same@10
    Packages: +7
    +++++++
    Progress: resolved 7, reused 5, downloaded 2, added 7, done

    dependencies:

    • looks-same 10.0.0

    Done in 1.3s

    ❯ du -cksh *(D) | sort -hr
668K	total
660K	node_modules
4.0K	pnpm-lock.yaml
4.0K	package.json
  • 10.0.0-rc.0 - 2024-03-07

    💣 Breaking changes

    • node versions less than 18.7.0 are no longer supported

    💬 Common

    • update sharp to 0.33.2 which install libvips from npm and not from gh (more info here). Moreover new version weighs 1.1Mb vs 27Mb (previous version).
    • this version available by npm i hermione@next
  • 9.0.1 - 2024-08-09

    chore(release): 9.0.1

  • 9.0.1-alpha.0 - 2024-08-06
  • 9.0.0 - 2023-10-31

    💣 Breaking changes

    • node versions less than 18.0.0 are no longer supported

    🐛 Bug fixes

  • 8.2.4 - 2023-10-11

    🐛 Bug fixes

    • diffClusters with createDiffImage: true now returns array of diffArea if shouldCluster: false
  • 8.2.3 - 2023-09-27

    🐛 Bug fixes

    out of bounds with createDiffImage: true

  • 8.2.2 - 2023-09-25

    🐛 Bug fixes

    fix typings for looksSame with createDiffImage: true

  • 8.2.1 - 2023-08-02

    chore(release): 8.2.1

  • 8.2.0 - 2023-08-02

    🚀 Improvements:

    Add an ability to calculate image difference and image equality simultaneously

    If you need both co compare images and create diff image, you can pass option createDiffImage: true,
    it would work faster than two separate function calls:

    const {
    equal,
    diffImage,
    differentPixels,
    totalPixels,
    diffBounds,
    diffClusters
    } = await looksSame('image1.png', 'image2.png', {createDiffImage: true});

    if (!equal) {
    await diffImage.save('diffImage.png');
    }




  • 8.1.0 - 2022-11-21


  • 8.0.1 - 2022-09-22


  • 8.0.0 - 2022-09-19


  • 7.3.0 - 2021-02-03


from looks-same GitHub release notes

Important

  • Warning: This PR contains a major version upgrade, and may be a breaking change.
  • Check the changes in this PR to ensure they won't cause issues with your project.
  • This PR was automatically created by Snyk using the credentials of a real user.
  • Max score is 1000. Note that the real score may have changed since the PR was raised.

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open upgrade PRs.

For more information:

@snyk-bot
feat: upgrade looks-same from 7.3.0 to 10.0.1
a831e50 
Snyk has created this PR to upgrade looks-same from 7.3.0 to 10.0.1.

See this package in npm:
looks-same

See this project in Snyk:
https://app.snyk.io/org/dustin4444/project/35fbc727-b7bf-4ca2-87a4-c1bcb92fdf05?utm_source=github&utm_medium=referral&page=upgrade-pr
@gemini-code-assist
Copy link

gemini-code-assist bot commented Oct 15, 2025

Warning

You have reached your daily quota limit. Please wait up to 24 hours and I will start processing your requests again!

@coderabbitai
Copy link

coderabbitai bot commented Oct 15, 2025

Important

Review skipped

Ignore keyword(s) in the title.

Please check the settings in the CodeRabbit UI or the .coderabbit.yaml file in this repository. To trigger a single review, invoke the @coderabbitai review command.

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

✨ Finishing touches
🧪 Generate unit tests (beta)
  • Create PR with unit tests
  • Post copyable unit tests in a comment
  • Commit unit tests in branch snyk-upgrade-f3cf3b6100e80ce4b6295d31891c511f

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

Comment @coderabbitai help to get the list of available commands and usage tips.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

None yet

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

2 participants

@Dustin4444 @snyk-bot